10488f4a3ec2f89e406cc8a205162273_JaffaCakes118 | Triage

Sharing

Copy URL Twitter E-mail

General

Target

10488f4a3ec2f89e406cc8a205162273_JaffaCakes118
Size

8KB
MD5

10488f4a3ec2f89e406cc8a205162273
SHA1

e1e73958a18ec8b3766b1a96dbc17949c229f49b
SHA256

5d185de391938dd6556c8ed87bdb42d2922d5f401cded1712851b782b9cd4d6b
SHA512

19bf90b970c8ecf367a1530b1d6d4d642b8763b3235c95762e007d6e89525a00f531b0c5f7c1d9333ed270af004b721c544acf57ddefa119f2c206a2212cdfe9
SSDEEP

192:324XHuyvsQEeUqArvqdrrTKChAxAlQcOIi9ucCQePIv2B+q6g7:fXvvsXXnTqtrAxAlQcw9zK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
10488f4a3ec2f89e406cc8a205162273_JaffaCakes118

Files

10488f4a3ec2f89e406cc8a205162273_JaffaCakes118
.exe windows:5 windows x86 arch:x86

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Sections

.text
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 409KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ndata
Size: - Virtual size: 1.4MB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ